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Listing of Claims : 

1 . (Currently Amended) A method of improving security processing in a computing 
network, comprising [[steps of]]: 

providing security processing in an operating system kernel; 

providing an application program which makes use of the operating system kernel during 
execution; 

providing security policy information; 
executing the application program; and 

selectably [[securing]] encrypting at least one communication of the executing 
application program using the provided security processing in the operating system kernel, under 
conditions specified by the security policy information. 

2. (Original) The method according to claim 1, wherein the security policy information 
is stored in a security repository. 

3. (Original) The method according to claim 2, wherein the security policy information 
is usable for more than one executing application program. 

4. (Currently Amended) The method according to claim 1, wherein the conditions 
[[include]] comprise network addresses. 

5. (Original) The method according to claim 4, wherein the network addresses specify 
one or more of server addresses and destination addresses. 

6. (Currently Amended) The method according to claim 4, wherein the network 
addresses [[include]] comprise ranges of source addresses and/or ranges of destination addresses. 
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7. (Currently Amended) The method according to claim 1, wherein the conditions 
[[include]] comprise one or more port numbers and/or one or more port number ranges. 

8. (Currently Amended) The method according to claim 1 5 wherein the conditions 
[[include]] comprise one or more job names. 

9. (Currently Amended) The method according to claim 1, wherein the conditions 
[[include]] comprise one or more client identifiers. 

10. (Currently Amended) The method according to claim 1 , further comprising [[the 
step of]] checking the security policy information when the executing application program 
establishes a connection, and wherein the [[selectably securing step communicates]] 
communications on that connection are encrypted according to a result of the checking step. 

1 1 . (Currently Amended) The method according to claim 1 , whereby 
communications from the executing application program may be [[secured]] encrypted even 
though the provided application program has no code for security processing. 

12. (Currently Amended) The method according to claim 1, wherein the provided 
application program [[includes invocation of]] invokes one or more security directives, and 
further comprising [[the step of]] executing, during execution of the provided application 
program, one or more of the invoked security directives. 

13. (Currently Amended) The method according to claim 1, wherein, when a result of 
evaluating the security policy information so indicates, [[the selectably securing step thereby 
secures]] communications on only some sockets of a port are encrypted . 

14. (Original) The method according to claim 1, wherein the provided security 
processing operates in a Transmission Control Protocol layer of the operating system kernel. 
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15. (Original) The method according to claim 1, wherein the provided security 
processing implements Secure Sockets Layer. 

16. (Currently Amended) The method according to claim 1, wherein the provided 
security processing implements [[Transaction]] Transport Layer Security. 

17. (Currently Amended) A system for improving security processing in a computing 
network, comprising: 

means for performing security processing in an operating system kernel; 

security policy information specifying one or more conditions under which the means for 
performing security processing is to be activated; 

means for executing an application program which makes use of the operating system 
kernel during execution; and 

means for selectably [[securing]] encrypting , according to the conditions specified by the 
security policy information, at least one communication of the executing application program 
using the means for performing security processing. 

1 8. (Currently Amended) A computer program product for improving security 
processing in a computing network, the computer program product [[embodied on one or more 
computer-readable media and]] comprising: 

a computer usable medium having computer readable program code embodied 
thereintherewith, the computer usable medium comprising: 

computer-readable program code [[means for performing]] configured to perform 
security processing in an operating system kernel; 

computer-readable program code [[means for accessing]] configured to access security 
policy information, the security policy information specifying one or more conditions under 
which the computer-readable program code [[means for performing]] configured to perform 
security processing is to be activated; 
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computer-readable program code [[means for executing]] configured to execute an 
application program which makes use of the operating system kernel during execution; and 

computer-readable program code [[means for selectably securing]] configured to 
selectably encrypt, according to the conditions specified by the security policy information, at 
least one communication of the executing application program using the computer-readable 
program code [[means for performing]] configured to perform security processing. 



